Security Engineer

THE ROLE: Security Engineer

We're Looking For...

The Security Engineer uses security knowledge and experience to operate company technical security systems. The Security Engineer is a key player of the security team. This position requires a strong knowledge of cyber security techniques and security tools. This role is responsible for handling the day to day security alerts received from the various security tools and operating the security applications. The Security Engineer acts as a member of the Security and Incident Response Team as required. This position will work across functional boundaries from time to time and collaborate with other departments as needed.

What You'll Do:

• Understanding the organizational direction, goals, and industry environment.

• Contributes to the information security roadmap as part of the security team.

• Assists in the execution of internal application penetration testing.

• Conducts the vulnerability scanning of various systems and participates in the remediation effort as directed by the Senior Security Engineer.

• Assists the Senior Security Engineer and Security Manager with the assessment of new and emerging security software, products, methods.

• Successfully maintains approved security tools and policies.

• Participates in the implementation of security best practices for both in-house infrastructure and cloud providers.

• Maintains and works network access control and monitoring techniques for the enterprise.

• Works within the infrastructure, technical support, and security departments to accomplish security objectives and goals.

• Interacts from time to time with third party security contractors and vendors.

• Assists in the development of a vision and strategy for overall network security and the security department.

• Leverages technology knowledge across the organization for the implementation of security best practices to meet business goals, customer needs, and regulatory requirements.

• Assists the Senior Security Engineer and Security Manager with the implementation of new security technology solutions.

• Works with contracted security vendor resources as required to escalate issues for quick problem resolution.

• Assists with the risk assessments and technology retirement activities in conjunction with members of the security and infrastructure teams.

• Resolves daily security alerts by conducting security investigations and seeks guidance where appropriate.

• Provide technical security support to the organization.

• Communicates the need for security features to the security team.

• Makes recommendations to resolve business security issues.

• Participates in investigations of security incidents as required.

• Gathers information as directed for long-term security strategies.

• Executes the vendor vetting process in support of other RGG departments.

• Works with the Infrastructure and Technical Service Support (TSS) teams on a variety of security related items such as: quarterly firewall reviews, server patching, and proper access management techniques.

About You:

At Rue Gilt Groupe, diversity enriches our passion, collaboration, kindness and innovation. We're committed to fostering an inclusive environment where every Associate is empowered to learn, grow and bring their full self to work. Even if you don't check off every qualification in the job description, that's okay. We encourage you to apply to any role that excites you and sparks delight! We can't wait to learn more about you.

• 4+ years of cyber security experience.

• 3+ years hands-on experience operating and maintaining any of the following security technology including experience with: MFA, LAN, WAN, MDM, Firewall, AV, Security Incident and Event Management (SIEM) applications, and Intrusion Detection & Prevention (IDP or XDR) systems.

• Okta or similar experience is a plus

• Exhibits excellent team player skills and willingness to grow.

• Demonstrates excellent written and verbal communications.

• Must work with a high degree of confidentiality and responsibility.

• Basic knowledge of modern cyber security best practices.

• Basic knowledge of wireless technologies, protocols, encryption standards, network management, and analysis tools.

• Basic technical knowledge of: anti-virus software, firewalls, intrusion detection systems, network security measures and data privacy practices laws

• At least one industry certification of any of these certifications: A+, Network+, Security+ and or CISSP certification or willingness to pursue a certification. Other certifications can be acceptable substitutes.

• A college degree or some college course work in computer science or equivalent program desired

#LI-Hybrid

ABOUT US:

Rue Gilt Groupe is a leading off-price e-commerce portfolio company, connecting the next-generation shopper to world-class brands. We've defined the online treasure hunt through our daily sale events allowing a large, loyal member base to discover over 5,000 premium and luxury brands at prices up to 70% off full-price retail.

Rue Gilt Groupe operates three complementary sites - Rue La La, Gilt, and Shop Premium Outlets.

Our vision at RGG is to spark delight through daily discovery - we make shopping an occasion to celebrate. At the forefront of fashion and technology, we're also in the business of sparking delight for our Associates. We inspire each other, our Members, and ourselves to push past the expected - every day. Our culture is rooted in our values and together we work to demonstrate being Kind, Passionate, Collaborative, Innovative, Tenacious and Empowered.